I have read how to protect admin folder with .htaccess and .htpasswd file but in PyroCMS admin login (ex:
example.com/admin) just only routing system (no admin folder yet).
So, how can I double protect my admin access?
You can limit the access to the admin with the htaccess to your IP, however, if you have a dynamic IP you might lock yourself out.
To do this place a .htaccess in your admin folder and put the following lines in
order deny,allow allow from 22.214.171.124 (replace with your IP address) deny from all